Description

The use of a hard-coded cryptographic key significantly increases the possibility that encrypted data may be recovered.

Likelihood of Exploit: High

Applicable Platforms
Language Class: All

Time Of Introduction

• Architecture and Design

Common Consequences

Detection Methods
None

Potential Mitigations

Relationships

Demonstrative Examples   (Details)

1. The following code examples attempt to verify a password using a hard-coded cryptographic key. The cryptographic key is within a hard-coded string value that is compared to the password and a true or false value is returned for verification that the password is equivalent to the hard-coded cryptographic key. (Demonstrative Example Id DX-92)

White Box Definitions
None

Black Box Definitions
None

Taxynomy Mappings

References:
None